General Data Protection Regulations (GDPR) means you, as the 'data subject', have the right to access your own data.
All requests for access must be in writing via an Access to Medical Records Form, which can be provided on request or downloaded from our website by clicking here.
A response will be provided as soon as possible and in any event within 28 days. Where an application is denied, a reason will be given. In some circumstances, some parts of your record may be withheld.
Under GDPR, the practice does not charge for providing a copy of requested information.
However, should a request be deemed either "unfounded, excessive or repetitive", a reasonable fee may be charged.
A reasonable fee may be charged when requests for additional copies of the same information are made.
Provision of Information to Third Parties
The practice may share your personal information with other NHS organisations where this is appropriate for your healthcare.
In other circumstances we may approach you for specific consent to release personal information to third parties.
Information will not normally be released to other family members without written patient consent.
In some circumstances there are statutory or ethical obligations to disclose information to others (such as public health issues) which may not require your consent; however you may be consulted about these in advance.
All staff have access to your medical and personal details which is required in relation to their roles, and have completed confidentiality agreements.